Commit Graph

653 Commits

Author SHA1 Message Date
Jan Kaluza
af9996ce69 core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
- mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
- mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
- mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
  in multiple Require directives with different arguments (CVE-2014-8109)
2014-12-17 09:25:50 +01:00
Joe Orton
8c01244b34 require apr-util 1.5.x 2014-10-14 10:53:35 +01:00
Jan Kaluza
5d7dedd78c use NoDelay and DeferAcceptSec in httpd.socket 2014-09-18 08:04:18 +02:00
Jan Kaluza
46346fae47 increase suexec minimum acceptable uid/gid to 1000 (#1136391) 2014-09-08 14:12:40 +02:00
Jan Kaluza
b430bfe6b0 fix hostname requirement and conflict with openssl-libs 2014-09-03 16:17:05 +02:00
Jan Kaluza
36930381bc use KillMode=mixed in httpd.service (#1135122) 2014-09-01 09:32:54 +02:00
Joe Orton
92ee9cf626 set vstring based on /etc/os-release (Pat Riehecky, #1114539)
Resolves: rhbz#1114539
2014-08-29 16:13:01 +01:00
Joe Orton
793563ad40 pull in httpd-filesystem as Requires(pre) (#1128328)
- fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348)
- require hostname for mod_ssl post script (#1135118)
Resolves: rhbz#1135118
Resolves: rhbz#1134348
Resolves: rhbz#1128328
2014-08-29 14:45:59 +01:00
Joe Orton
452da8d9b6 pull in httpd-filesystem as Requires(pre) (#1128328)
Resolves: rhbz#1128328
2014-08-29 14:35:18 +01:00
Jan Kaluza
94399e06f8 mod_systemd: updated to the latest version
- use -lsystemd instead of -lsystemd-daemon (#1125084)
- fix possible crash in SIGINT handling (#958934)
2014-08-22 12:11:38 +02:00
Joe Orton
4475e3e262 mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
- switch default ssl.conf to use PROFILE=SYSTEM (#1109119)
Resolves: rhbz#1109119
2014-08-21 11:32:44 +01:00
Peter Robinson
f65d1ef433 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 20:45:39 +00:00
Jan Kaluza
5ee418c3b4 add /usr/bin/useradd dependency to -filesystem requires 2014-08-15 09:34:45 +02:00
Jan Kaluza
34169cb8c8 fix creating apache user in pre script (#1128328) 2014-08-14 19:45:12 +02:00
Jan Kaluza
bb13a678b7 fix creating apache user in pre script (#1128328) 2014-08-14 19:41:29 +02:00
Joe Orton
b46475bf5a enable mod_request by default for mod_auth_form
- move disabled-by-default modules from 00-base.conf to 00-optional.conf
2014-07-31 12:16:47 +01:00
Joe Orton
679dc72f31 remove old sources. 2014-07-21 22:06:25 +01:00
Joe Orton
1fce54ba4f expand variables in docdir example configs 2014-07-21 22:06:14 +01:00
Joe Orton
94c96741e2 update to 2.4.10 2014-07-21 22:05:49 +01:00
Jan Kaluza
572a5df9ee add support for systemd socket activation (#1111648) 2014-07-08 15:52:58 +02:00
Jan Kaluza
63d5e3d13d remove conf.modules.d from httpd-filesystem subpackage (#1081453) 2014-07-07 13:16:02 +02:00
Jan Kaluza
fa66d3ef87 add httpd-filesystem subpackage (#1081453) 2014-07-07 12:47:52 +02:00
Joe Orton
c0bdfa464b mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119)
Resolves: rhbz#1109119
2014-06-20 10:54:36 +01:00
Dennis Gilmore
2d734473b0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 15:31:52 -05:00
Jan Kaluza
5b3da1ff0f add support for SetHandler + proxy (#1078970) 2014-03-28 11:35:30 +01:00
Jan Kaluza
6228c46ec0 move macros from /etc/rpm to macros.d (#1074277)
- remove unused patches
2014-03-27 12:39:16 +01:00
Jan Kaluza
9f6ae98c27 update to 2.4.9 2014-03-18 07:55:27 +01:00
Joe Orton
8efab6ad85 use 2048-bit RSA key with SHA-256 signature in dummy certificate 2014-02-28 17:45:18 +00:00
Joe Orton
6a627fd53c Create drop directory for systemd snippets 2014-02-28 08:10:10 +00:00
Joe Orton
15ab7bceeb Create drop directory for systemd snippets 2014-02-28 08:09:14 +00:00
Jan Kaluza
a035f96c4e remove provides of old MMN, because it contained double-dash (#1068851) 2014-02-27 12:03:34 +01:00
Jan Kaluza
567c7a9431 fix graceful restart using legacy actions 2014-02-20 12:19:52 +01:00
Joe Orton
589ffb17e6 Pull from 2.4.x, omit STATUS. 2014-01-07 16:57:24 +00:00
Joe Orton
a2e9cec246 conflict with pre-1.5.0 APR
- fix sslsninotreq patch
2013-12-12 14:13:38 +00:00
Joe Orton
ed353d03f2 update to 2.4.7 (#1034071) 2013-11-27 17:19:09 +00:00
Joe Orton
fdd0182ac0 switch to requiring system-logos-httpd (#1031288) 2013-11-22 19:03:44 +00:00
Joe Orton
353758d2ab change mmnisa to drop "-" altogether 2013-11-12 12:45:29 +00:00
Joe Orton
b39251e583 drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide
for transition
2013-11-12 09:54:01 +00:00
Jan Kaluza
13efaf1ac9 systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg 2013-11-01 12:44:15 +01:00
Jan Kaluza
51fe77bc1f systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg 2013-11-01 12:43:40 +01:00
Joe Orton
8de85ede52 Merge. 2013-10-31 16:04:17 +00:00
Joe Orton
42eaf6a375 mod_ssl: allow SSLEngine to override Listen-based default (r1537535) 2013-10-31 15:54:58 +00:00
Jan Kaluza
f735ee187e Fix merge conflicts 2013-10-24 12:30:13 +02:00
Jan Kaluza
b3f304619b systemd: send SIGWINCH signal without httpd -k in ExecStop 2013-10-24 12:26:47 +02:00
Joe Orton
aa55b1c6dd load mod_macro by default (#998452)
- add README to conf.modules.d
- mod_proxy_http: add possible fix for threading issues (r1534321)
- core: add fix for truncated output with CGI scripts (r1530793)
Resolves: rhbz#998452
2013-10-21 20:17:46 +01:00
Joe Orton
7e8888f83d update for 2.4.6 2013-10-21 20:14:01 +01:00
Jan Kaluza
15de99261c require fedora-logos-httpd (#1009162) 2013-10-10 08:55:13 +02:00
Jan Kaluza
0527022d9f revert fix for dumping vhosts twice 2013-07-31 08:06:52 +02:00
Joe Orton
e90db98c1f update to 2.4.6
- mod_ssl: use revised NPN API (r1487772)
2013-07-22 17:39:21 +01:00
Joe Orton
3b5640856d mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
- apxs: mention -p option in manpage
2013-07-22 17:03:38 +01:00